Skip to content

fix: relax requests version from ==2.32.* to >=2.32.0 - #1217

Open
ovodela wants to merge 1 commit into
capitalone:devfrom
ovodela:fix/relax-requests-version
Open

fix: relax requests version from ==2.32.* to >=2.32.0#1217
ovodela wants to merge 1 commit into
capitalone:devfrom
ovodela:fix/relax-requests-version

Conversation

@ovodela

@ovodela ovodela commented Aug 31, 2026

Copy link
Copy Markdown

Summary

  • Changes requests==2.32.* to requests>=2.32.0 in requirements.txt
  • The ==2.32.* pin prevented using DataProfiler alongside projects that need requests 2.33+
  • The security floor (CVE-2024-35195) is 2.32.0, so >=2.32.0 preserves the vulnerability fix while allowing future compatible versions
  • Removes a stale comment that was only used to trigger a Mend check

Test plan

  • CI tests pass with the relaxed version constraint
  • Verify pip install DataProfiler resolves requests correctly
  • Confirm no regressions in URL loading via data_readers/data_utils.py

Closes #716

The ==2.32.* pin prevented using DataProfiler alongside projects that
need requests 2.33+. The security floor (CVE-2024-35195) is 2.32.0,
so >=2.32.0 preserves the fix while allowing future compatible versions.

Also removes a stale comment that was only used to trigger a Mend check.

Closes capitalone#716
@ovodela
ovodela requested a review from a team as a code owner August 31, 2026 22:14
@CLAassistant

CLAassistant commented Aug 31, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​requests@​2.32.5 ⏵ 2.34.299 +1100 +2100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants